Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
295 articles by Johnie T Young
Guides·9 min
Read →AI Incident Response Plan: What Regulators Expect When Your AI System Fails
When an AI system causes harm, misclassifies a person, leaks data, or fails in a high-stakes context, regulators expect a documented incident response process. EU AI Act Article 73, GDPR Article 33, and state AI laws all impose notification timelines. Here is what an AI-specific incident response plan must cover.
ai-governanceincident-responsecomplianceeu-ai-act
Guides·9 min
Read →EU AI Act Annex III Compliance Roadmap: December 2, 2027 Deadline (Start Now)
The EU AI Act Annex III high-risk AI deadline is December 2, 2027 (extended by Digital Omnibus, May 2026). If your team has not started, this compliance roadmap covers the five steps to reach minimum viable compliance: inventory, classify, document, conformity assessment, and monitoring.
eu-ai-actcomplianceenterprise-governancehigh-risk-ai
news·5 min
Read →Connecticut Data Privacy Law Expands July 1: Lower Threshold Catches More Small Teams
Connecticut's SB 4 (Public Act 26-64) takes effect July 1, 2026, dropping the CTDPA coverage threshold from 100,000 to 35,000 consumers and adding two new no-threshold triggers. Here is what small teams need to check today.
data-privacyconnecticutctdpastate-ai-law
guides·5 min
Read →Does Your AI Vendor Train on Your Business Data? 11 Vendors Compared (2026 Policy Guide)
11 AI vendors compared: which ones train on your business data in 2026? See opt-out steps for ChatGPT, Copilot, and Atlassian's August deadline.
ai-data-privacyvendor-policygdprtraining-data
news·5 min
Read →Russia's Project 2026 Targets AI Training Data: 6-Point Vendor Risk Checklist for Small Teams
6 vendor risk checklist questions for small teams after Russia's SDA leaked plans to poison AI training data at scale. Bloomberg's June 2026 report.
ai-vendor-riskai-governancecybersecuritydisinformation
news·5 min
Read →GPT-5.6 Stagger: 5 AI Procurement Policy Updates Compliance Teams Need After the White House Intervened
The White House asked OpenAI to stagger GPT-5.6 access customer by customer in June 2026, a first for preemptive US government AI model restrictions. Here are 5 procurement policy updates compliance teams should make now.
ai-governancefrontier-aiopenaigovernment-regulation
Templates·9 min
Read →AI compliance checklist by team size: Tier 1 (1-10), Tier 2 (11-50), Tier 3 (51-200)
Need an AI compliance checklist by team size? Use 3 tiers (1-10, 11-50, 51-200) with clear triggers for when to add vendor and incident response steps.
compliancechecklisttemplatessmall-teams
Guides·8 min
Read →AI compliance cost for small teams 2026: what you actually pay
AI compliance cost for small teams in 2026: most 1-50 person orgs pay under $5,000 a year unless bias audits apply. Full breakdown by size.
compliancecostbudgetsmall-teams
AI Security·5 min
Read →AI Agent API Token Leak: 24-Hour Incident Response Playbook
24-hour runbook for leaked AI agent tokens: revoke, rotate, audit blast radius, and restore access before costs spiral. 7 copy-paste steps.
ai-securityincident-responseapi-tokensai-agents
Guides·10 min
Read →EU AI Act Digital Omnibus August 2026: will the deadline hold?
EU AI Act Digital Omnibus August 2026: will the deadline hold, or does high-risk delay to December 2027 need formal adoption first?
eu-ai-actdigital-omnibusaugust-2026deadlines
Guides·8 min
Read →AI Coding Tools Are Destroying SSDs: What Your Acceptable Use Policy Must Address
OpenAI Codex was silently writing 640 TB/year to developer SSDs through a logging bug. This is a governance gap most acceptable-use policies miss. Here is what IT and compliance teams need to add.
ai-governanceacceptable-use-policyai-coding-toolsshadow-ai
Guides·9 min
Read →NYC Local Law 144 AI Bias Audit: Employer Guide 2026
What does the NYC Local Law 144 AI bias audit require? Independent audits, published results, candidate notice, fines to $1,500 daily. Six-step checklist.
nyclocal-law-144bias-audithiring